Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/3138362e3232352e3230382e302f32342d3234203d3e20323633313031.roa
File:                     3138362e3232352e3230382e302f32342d3234203d3e20323633313031.roa (raw, json)
Hash identifier:          HnGvuWzmnR4TKSl3/Qh6jC+7h9MvGDCQ4zMVflnfbtQ=
Subject key identifier:   02:95:02:49:8D:11:FE:CD:B2:32:EE:B2:50:DB:F2:1B:55:AD:BA:ED
Certificate issuer:       /CN=0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43
Certificate serial:       16F719E1DDF12491177E69560C3135A6762D993E
Authority key identifier: 0F:29:5E:9A:03:BD:F7:FF:2D:0A:B2:3B:8D:77:ED:EC:F9:B5:9C:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/3138362e3232352e3230382e302f32342d3234203d3e20323633313031.roa
Signing time:             Thu 06 Mar 2025 02:00:08 +0000
ROA not before:           Thu 06 Mar 2025 01:55:08 +0000
ROA not after:            Thu 05 Mar 2026 02:00:08 +0000
asID:                     263101
IP address blocks:        186.225.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.crl
                          rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:51:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:f7:19:e1:dd:f1:24:91:17:7e:69:56:0c:31:35:a6:76:2d:99:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43
        Validity
            Not Before: Mar  6 01:55:08 2025 GMT
            Not After : Mar  5 02:00:08 2026 GMT
        Subject: CN=029502498D11FECDB232EEB250DBF21B55ADBAED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:31:5a:05:3b:c6:ec:0a:0a:e1:00:0c:22:e2:
                    16:bc:14:67:68:51:8e:c8:29:60:0b:5c:da:f1:6e:
                    df:a6:f9:f7:63:2d:11:5f:cb:bf:3a:c0:e3:5f:90:
                    dc:c4:6a:14:db:5f:d0:45:6d:95:6b:fe:44:b0:b7:
                    c2:27:f2:cf:59:aa:39:6d:f1:84:a3:ce:bb:3b:70:
                    f0:2d:4f:e1:d9:e1:be:66:46:d2:78:20:33:32:85:
                    f8:05:dd:47:4f:05:8f:24:ae:b0:79:53:2a:34:fb:
                    dd:ab:29:d3:81:3d:16:05:60:74:f5:99:a7:64:3a:
                    3b:14:80:47:21:e3:77:b2:ed:69:1c:6f:65:06:78:
                    cb:e8:1c:73:aa:b3:72:e8:35:1f:e7:d5:24:b5:42:
                    e4:ea:d9:c8:91:44:32:4a:ca:0e:80:ca:0f:dc:15:
                    01:b2:1c:16:27:12:cc:d1:43:e9:fd:72:c4:b7:51:
                    e1:f9:c7:19:d6:6f:e7:51:40:42:98:99:59:7e:58:
                    77:a7:38:53:e1:d3:21:4a:3d:86:d8:65:d9:7b:9f:
                    6e:4c:26:a2:5f:12:1e:cb:9f:c0:03:c7:e4:be:7f:
                    cd:a9:fe:13:52:b6:60:bd:3a:42:fa:fc:b5:c9:33:
                    af:14:da:93:cd:c9:ca:48:d2:b9:e0:38:4e:04:cd:
                    24:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:95:02:49:8D:11:FE:CD:B2:32:EE:B2:50:DB:F2:1B:55:AD:BA:ED
            X509v3 Authority Key Identifier:
                keyid:0F:29:5E:9A:03:BD:F7:FF:2D:0A:B2:3B:8D:77:ED:EC:F9:B5:9C:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/3138362e3232352e3230382e302f32342d3234203d3e20323633313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:cd:12:8f:97:bd:71:30:23:39:4c:47:db:3f:59:df:24:cd:
         fc:08:ac:0f:83:50:d4:16:2a:76:a8:0e:64:22:48:c1:87:7f:
         ad:09:65:2e:c7:af:0e:6a:a5:16:13:6f:3d:e3:6f:f0:02:8d:
         3d:82:be:8a:f7:d8:2d:ee:dd:09:13:39:85:0a:65:e4:61:d6:
         95:1d:e9:86:d7:5e:49:fb:59:88:de:5b:e1:ee:3f:88:d1:c7:
         13:f5:72:d5:e9:f4:c0:7c:08:55:ab:30:0e:19:94:fd:37:be:
         36:73:3c:70:67:8c:04:6a:73:f4:9c:db:83:a4:1c:83:fe:85:
         55:59:be:18:8f:d1:5d:ff:ae:c3:ca:7e:5f:05:b5:0c:1f:e9:
         be:95:b6:cf:20:16:98:06:ca:2c:5d:fc:6d:1a:b6:98:e7:ea:
         2e:99:00:fa:1e:c0:7a:c9:4b:86:38:96:00:d1:d2:49:de:5a:
         ee:43:1b:b2:89:72:35:5a:10:c1:ad:e8:23:18:d0:7c:61:91:
         55:39:df:7a:46:32:ab:88:14:37:6d:d1:d6:63:3b:1d:e6:cd:
         e5:c7:57:64:97:18:9c:2f:33:76:9e:13:89:4e:2a:f2:83:e2:
         60:e8:39:13:dd:4a:93:d3:1c:6c:0d:6e:b5:de:74:12:2f:47:
         f8:b9:c8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:33:31 2025 by rpki-client